Re: [Swan] IPsec PFP support on linux

2017-05-02 Thread Sowmini Varadhan
On (05/02/17 09:58), Paul Wouters wrote: >I think you want to use Opportunistic IPsec, eg see >https://libreswan.org/wiki/HOWTO:_Opportunistic_IPsec I dont think that what I want is opportunistic ipsec.. taking an extreme example, I can set up the ipsec tunnels with esp-null for *.5001

IPsec PFP support on linux

2017-05-02 Thread Sowmini Varadhan
I have a question about linux support for IPsec PFP (as defined in rfc 4301). I am assuming this exists, and is accessible from uspace, in which case I need some hints on how to set it up. Assuming I have a server listening at port 5001 that I want to secure via ipsec. Suppose I want to make sure